Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
File:                     pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft (raw, json)
Hash identifier:          yj7i95mOSzdsKJNdKLRYHArHO2+sGI29WZ0QNPfVVfw=
Subject key identifier:   4C:12:F3:67:71:2C:30:53:54:2C:3E:D9:39:B1:67:0D:CE:31:D8:E7
Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
Certificate issuer:       /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Certificate serial:       047C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
Manifest number:          0434
Signing time:             Thu 05 Nov 2026 00:45:18 +0000
Manifest this update:     Thu 05 Nov 2026 00:45:17 +0000
Manifest next update:     Thu 12 Nov 2026 00:45:17 +0000
Files and hashes:         1: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl (hash: 1ABuIvy69ShRisFB4Jbo6mAbrwPl465z+DMlTKuZQ10=)
                          2: DCD4CBC6D5FC11F1BB599C6E0266CEF9.roa (hash: 80FMYu4uMNxrWDdWrIbEc3oZ2iDpoKSZnSMm7WEC+nc=)
                          3: AB6989BCEADF11ECADC46036C4F9AE02.roa (hash: piqd3okCbVlFKjEolLFOOOARynspzmzOHcnRRet9yBg=)
                          4: 1E08C118BCA011F18FAF0E186511F970.roa (hash: cXzfWAgVNt/oetYU5jLI6QujcWE7Ht0Vkr37uq+4fB8=)
                          5: 51904090D11A11F189D44B64FF65CEF9.roa (hash: vDYM+jXj4oMJJJUhKdfSbjavg5gJTNzFnGTCGO9R+bM=)
                          6: 95C64BC0A20C11F1978F0A1A4811F970.roa (hash: wL66YNVnRgEwAMiQSYr0PpdCCahvdrdoToc9iJC1nx8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
                          rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 00:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1148 (0x47c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
        Validity
            Not Before: Nov  5 00:45:17 2026 GMT
            Not After : Nov 12 00:45:17 2026 GMT
        Subject: CN=6aebd19d-9569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:03:72:48:e4:c4:62:c5:48:fd:d0:dc:88:38:
                    07:62:1a:9d:28:11:d4:d9:2e:16:c2:84:6d:df:2a:
                    e4:7b:74:d2:36:b8:cb:b0:8d:95:2e:7d:e8:7a:cc:
                    0b:c7:2c:ea:a6:82:3b:94:25:c3:40:8a:63:3e:f6:
                    9b:dd:b0:75:2a:22:1e:6e:78:22:f1:fc:9f:59:ed:
                    55:99:e0:a0:26:9c:67:ed:e4:85:22:f3:e1:f0:50:
                    9f:62:84:58:f2:c1:49:a5:02:d5:72:88:67:b7:ae:
                    df:36:2a:b6:c3:8c:1b:54:a0:c5:90:79:77:65:30:
                    35:df:0b:a3:82:68:3c:fc:71:d1:5e:4c:d4:c7:47:
                    73:ea:37:d8:13:a0:be:c7:7d:ce:5b:ce:24:46:a8:
                    d2:85:43:03:8d:66:d2:e9:30:6c:8d:f4:bd:5a:2a:
                    97:04:1e:02:a5:e0:3f:ec:20:71:0d:7b:c3:5e:22:
                    03:1f:0b:8e:c4:d1:f3:87:5f:00:7e:09:20:70:bf:
                    3d:89:34:7d:fc:f1:d1:9a:f2:8f:a6:b8:14:1d:1f:
                    b4:dc:0e:a9:76:08:88:88:1d:a5:fd:c5:a2:0a:a5:
                    71:16:1a:f9:bb:56:d4:d4:99:c8:26:f2:63:2f:a3:
                    34:8f:d3:a4:71:81:44:63:83:60:99:21:bd:92:4a:
                    bd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:12:F3:67:71:2C:30:53:54:2C:3E:D9:39:B1:67:0D:CE:31:D8:E7
            X509v3 Authority Key Identifier:
                keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:cd:83:2c:5c:7f:1b:cd:97:0c:9f:ec:21:90:90:3d:ac:ef:
         fe:24:62:26:fa:ec:d5:73:65:82:a4:e2:1c:68:9f:d0:c4:49:
         64:b3:a9:1a:bc:26:d0:0a:5a:35:00:6b:59:33:52:d2:81:1d:
         93:5f:ff:3e:54:0c:2a:8b:3c:13:ae:23:8d:9b:ae:cc:2e:9e:
         e5:a0:a9:4c:27:11:78:7b:91:5f:31:16:8d:a2:07:63:d5:d2:
         0c:55:6d:3f:55:c3:46:ad:2c:6b:87:ac:7e:ad:a9:92:b3:f2:
         e0:ac:57:c0:c9:19:fb:3f:6e:cd:43:5d:47:d1:1c:df:e2:75:
         f8:32:fc:1f:43:e9:d7:5a:70:78:56:25:b9:cc:da:ac:36:58:
         c7:34:c9:5f:48:3a:a5:be:fa:4a:d8:ea:4c:4f:7d:a9:d0:83:
         76:35:7b:a2:a1:63:a8:ce:2e:4e:e8:70:1c:5b:88:22:34:60:
         91:48:6c:d2:49:3d:58:e0:f0:34:12:8b:cd:3c:d1:3d:00:2a:
         d9:c4:16:87:60:2e:f9:23:22:7b:27:d0:52:84:e4:cd:d8:e5:
         26:24:1c:54:7d:e3:bb:cd:0e:74:0c:f3:ac:6d:b5:5c:ec:99:
         80:cc:81:49:14:21:9f:be:ab:52:81:e4:bd:bf:e6:da:04:7e:
         64:70:21:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:53:45 2026 by rpki-client